Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa
File: 5671b96e-0aca-32e0-84ac-30d2639538f9.roa (raw, json)
Hash identifier: d8ja0h64N/XtfZOGKYnUvd+iv0zONZBuH/RxpkpbN0k=
Subject key identifier: 4B:66:53:6C:AA:91:8A:70:EF:21:2A:83:51:7C:00:15:CB:1D:32:72
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246B3908006C5D06F3E2770
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3356
IP address blocks: 130.174.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b3:90:80:06:c5:d0:6f:3e:27:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=8a02f23f-eb48-4f7e-8f21-7a7e6c96df37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:97:8b:c9:fd:f5:67:2b:70:fa:07:19:bd:
f3:cd:76:e6:cf:0a:ba:79:76:7c:0d:2e:c5:f9:2c:
e9:c6:1d:33:8e:aa:0a:73:b1:4f:e3:a7:67:40:eb:
36:40:98:b9:1a:2a:60:b7:d2:b2:00:23:87:af:c3:
43:cf:0d:50:f6:94:fe:02:73:87:1d:c6:70:22:1b:
f9:49:1a:3c:20:79:2c:37:47:5d:b3:21:d0:67:46:
a1:7f:c0:7d:3b:97:6a:a5:73:6c:37:c2:f2:d3:91:
ba:e1:55:7b:ca:8b:21:ea:c4:8c:80:c8:07:e4:33:
3c:d9:b6:c5:d7:44:3e:2e:dd:58:7e:ee:b6:2b:8c:
9c:a2:bf:86:41:1c:56:b9:d1:63:33:80:9c:9e:da:
38:eb:1c:91:72:80:08:f2:29:4c:5a:72:e4:fa:57:
2c:07:8c:6e:e0:85:c8:49:00:d8:2d:d4:3d:df:f3:
d7:45:0d:48:28:c9:88:8b:f3:a5:2e:78:3f:34:03:
9a:53:eb:6a:50:c9:e1:20:f6:e2:a7:8f:3f:22:9a:
ed:5d:6d:35:2f:a8:05:22:2a:4e:ee:ed:70:c4:96:
1f:96:8b:9f:a9:5b:1f:07:ab:13:5c:e5:c8:63:11:
5c:d7:bc:d0:03:94:82:39:a6:93:75:4d:08:12:ea:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:53:6C:AA:91:8A:70:EF:21:2A:83:51:7C:00:15:CB:1D:32:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5671b96e-0aca-32e0-84ac-30d2639538f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:72:2c:9b:39:ac:d1:7d:3a:bc:b3:35:c1:3b:31:ea:83:10:
b1:e5:27:33:c9:a1:9a:ec:7b:87:c6:cd:3d:35:b0:12:31:4a:
86:21:f0:48:c6:54:19:27:85:06:94:68:00:71:ed:47:1a:fb:
4c:a4:58:20:d6:99:fc:4f:c5:43:9d:ff:4c:32:90:d7:8f:9e:
a8:19:60:ad:90:9c:42:03:fc:c9:20:05:be:22:2a:38:82:af:
6b:55:5c:02:a7:85:e8:cb:7d:22:3f:31:fe:86:f5:c5:d9:60:
d9:b2:79:d0:63:20:8a:89:31:0c:db:62:4e:06:7d:65:da:90:
20:86:97:c2:c3:70:f8:1a:1b:3c:b7:5d:4f:bc:06:40:32:c6:
59:55:88:95:91:c1:bf:5a:a5:48:b7:1b:06:fd:29:6c:c2:b0:
6b:5e:d0:89:92:af:12:48:3a:86:46:54:94:3a:ed:23:9d:10:
b3:6a:45:88:e2:64:48:93:5d:52:ea:ee:eb:19:b6:ef:48:69:
61:fc:4b:f1:d7:f4:b6:a1:6a:c9:30:0b:41:10:20:b9:84:34:
90:17:57:57:8f:06:85:f8:95:1c:c6:da:bf:6d:57:eb:a5:5c:
4a:9d:02:7d:3f:ca:4e:e9:c3:d7:a2:8b:a2:04:fd:ff:ea:f1:
c7:80:1a:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrOQgAbF0G8+J3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OGEwMmYyM2YtZWI0OC00ZjdlLThmMjEtN2E3ZTZjOTZkZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X2Xi8n99WcrcPoHGb3zzXbmzwq6eXZ8DS7F
+Szpxh0zjqoKc7FP46dnQOs2QJi5Gipgt9KyACOHr8NDzw1Q9pT+AnOHHcZwIhv5
SRo8IHksN0ddsyHQZ0ahf8B9O5dqpXNsN8Ly05G64VV7yosh6sSMgMgH5DM82bbF
10Q+Lt1Yfu62K4ycor+GQRxWudFjM4Ccnto46xyRcoAI8ilMWnLk+lcsB4xu4IXI
SQDYLdQ93/PXRQ1IKMmIi/OlLng/NAOaU+tqUMnhIPbip48/IprtXW01L6gFIipO
7u1wxJYfloufqVsfB6sTXOXIYxFc17zQA5SCOaaTdU0IEuok5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtmU2yqkYpw7yEqg1F8ABXLHTJyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTY3MWI5NmUtMGFjYS0z
MmUwLTg0YWMtMzBkMjYzOTUzOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNyLJs5rNF9OryzNcE7MeqDELHlJzPJoZrse4fGzT01sBIxSoYh8EjG
VBknhQaUaABx7Uca+0ykWCDWmfxPxUOd/0wykNePnqgZYK2QnEID/MkgBb4iKjiC
r2tVXAKnhejLfSI/Mf6G9cXZYNmyedBjIIqJMQzbYk4GfWXakCCGl8LDcPgaGzy3
XU+8BkAyxllViJWRwb9apUi3Gwb9KWzCsGte0ImSrxJIOoZGVJQ67SOdELNqRYji
ZEiTXVLq7usZtu9IaWH8S/HX9LahaskwC0EQILmENJAXV1ePBoX4lRzG2r9tV+ul
XEqdAn0/yk7pw9eii6IE/f/q8ceAGlE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:50 2025 by rpki-client